$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b785fca9-9332-321f-a7fd-29a5c9014040.roa File: b785fca9-9332-321f-a7fd-29a5c9014040.roa (raw, json) Hash identifier: oV2e7eu4oABrvJrcySOT+BSYZM1IF8YWt9Y+zqWmn5I= Subject key identifier: F9:29:49:A5:15:BD:A1:60:3C:63:36:B9:69:D7:9A:A7:51:FD:CE:21 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49732FB5A90CB461F9EBB900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b785fca9-9332-321f-a7fd-29a5c9014040.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 65.22.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:2f:b5:a9:0c:b4:61:f9:eb:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0d1b80c2-0451-4d2c-b261-11e65e13014c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4e:4e:42:b5:cb:0f:60:47:73:47:f0:07:51: 81:7e:30:94:ab:59:b0:c2:c2:d2:87:eb:b2:c9:7c: 1c:00:e1:16:f7:9a:c1:67:48:f6:e9:38:89:99:de: b8:a7:02:20:d0:dd:6b:59:2b:6d:41:1b:f7:29:44: 14:41:c9:6d:1e:f1:fb:68:1d:89:53:63:de:11:1b: 26:9f:85:be:2c:4e:5c:8c:6b:f1:6d:d4:25:d8:a8: d9:bf:8f:98:c9:79:67:03:3e:09:94:f7:10:e2:58: ab:2f:3c:f3:49:78:2c:e0:19:49:ed:9c:b9:a7:71: 12:69:fa:51:32:50:66:07:8a:62:bd:36:e0:1d:ef: 1f:ac:1c:a2:f8:b2:08:fd:e6:7e:9e:57:f9:4c:8a: 71:f0:07:88:d1:3d:14:4d:e2:ab:22:be:27:34:7f: 51:42:54:3f:62:18:12:fc:7b:f3:5d:52:b9:a2:95: 9a:94:a9:d0:a9:eb:79:0a:c1:bd:95:0d:67:61:48: 9a:af:0a:db:d5:ed:86:0d:76:e2:d9:40:b5:c5:a9: d4:0c:7f:e1:13:de:2e:52:89:3d:cc:4e:67:94:a1: c3:d3:95:c6:93:92:42:a3:48:19:f6:6b:64:99:c4: 27:1f:0b:75:a9:4d:54:a9:d2:2b:38:21:2b:d5:53: 2b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:29:49:A5:15:BD:A1:60:3C:63:36:B9:69:D7:9A:A7:51:FD:CE:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b785fca9-9332-321f-a7fd-29a5c9014040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ad:a7:a1:3c:bc:87:a5:d3:88:ad:5e:fb:cc:17:08:e4:60: 91:dd:22:c5:0c:72:13:9b:93:ad:e5:ab:0b:1e:bd:ff:8a:f1: b2:c6:bf:23:15:9c:27:17:a0:6b:35:35:cb:d4:2b:ee:d1:52: 27:f9:c1:42:f5:c0:aa:6e:05:79:b8:8d:71:cf:a8:0f:72:2b: 7d:a2:91:9c:8c:22:35:49:37:1c:15:1e:ca:9e:ac:24:1a:17: 9d:f4:69:9b:ae:89:f7:c4:5a:09:d2:ac:1f:8b:eb:f6:ec:62: ce:1e:69:d8:db:8e:01:a0:93:aa:1b:12:f6:7a:a0:99:db:a3: 18:1d:96:b1:fd:38:fd:11:5f:91:b0:6e:8d:5b:35:f2:aa:da: c9:72:f7:b9:49:69:58:f7:52:96:4c:98:a2:78:50:87:c2:bd: 86:2e:b0:7d:70:1e:97:2c:89:ca:8f:fe:00:92:8b:aa:d7:47: a1:8f:f3:78:87:ce:2a:46:09:c0:e9:12:a0:0c:37:ed:74:06: d8:d6:45:23:77:f4:e3:7f:29:2c:5e:40:ed:5f:b1:37:7f:69: ce:9e:40:61:44:5d:6e:17:62:7d:ff:60:de:ec:5f:87:d4:36: 73:64:5f:36:2d:74:89:d5:bd:94:b2:a4:88:c1:f8:43:2c:3b: 42:7e:94:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcy+1qQy0YfnruQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGQxYjgwYzItMDQ1MS00ZDJjLWIyNjEtMTFlNjVlMTMwMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh05OQrXLD2BHc0fwB1GBfjCUq1mwwsLSh+uy yXwcAOEW95rBZ0j26TiJmd64pwIg0N1rWSttQRv3KUQUQcltHvH7aB2JU2PeERsm n4W+LE5cjGvxbdQl2KjZv4+YyXlnAz4JlPcQ4lirLzzzSXgs4BlJ7Zy5p3ESafpR MlBmB4pivTbgHe8frByi+LII/eZ+nlf5TIpx8AeI0T0UTeKrIr4nNH9RQlQ/YhgS /HvzXVK5opWalKnQqet5CsG9lQ1nYUiarwrb1e2GDXbi2UC1xanUDH/hE94uUok9 zE5nlKHD05XGk5JCo0gZ9mtkmcQnHwt1qU1UqdIrOCEr1VMrGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkpSaUVvaFgPGM2uWnXmqdR/c4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjc4NWZjYTktOTMzMi0z MjFmLWE3ZmQtMjlhNWM5MDE0MDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABitp6E8vIel04itXvvMFwjkYJHdIsUMchObk63lqwsevf+K8bLGvyMV nCcXoGs1NcvUK+7RUif5wUL1wKpuBXm4jXHPqA9yK32ikZyMIjVJNxwVHsqerCQa F530aZuuiffEWgnSrB+L6/bsYs4eadjbjgGgk6obEvZ6oJnboxgdlrH9OP0RX5Gw bo1bNfKq2sly97lJaVj3UpZMmKJ4UIfCvYYusH1wHpcsicqP/gCSi6rXR6GP83iH zipGCcDpEqAMN+10BtjWRSN39ON/KSxeQO1fsTd/ac6eQGFEXW4XYn3/YN7sX4fU NnNkXzYtdInVvZSypIjB+EMsO0J+lE8= -----END CERTIFICATE-----Generated at Fri Sep 25 09:31:37 2026 by rpki-client